MEDIUM🇬🇧 English

CVE-2026-24142

CVSS 6.3v3.1pub. 2026-05-20upd. 2026-05-21

NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

  • Nvidia Tensorrt Llm

    APP
    Nvidia
    < 1.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEDeserialization
CWE
Referencje

Powiązane podatności

CVE-2025-33255HIGH7.5ten sam produkt

NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsaf...

CVE-2026-24163HIGH7.5ten sam produkt

NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an uns...

CVE-2026-24160MEDIUM5.5ten sam produkt

NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return va...

CVE-2026-24207CRITICAL9.8PL ✓ten sam vendor

Authentication Bypass w NVIDIA Triton Inference Server umożliwiający RCE

CVE-2026-24178CRITICAL9.8PL ✓ten sam vendor

NVIDIA NVFlare – authorization bypass przez klucz kontrolowany przez użytkownika